Monitoring - Microsoft continues working on their machine learning algorithm to categorize encrypted envelopes accurately.
Microsoft's team is still working on a global and permanent fix.
Cisco continues submitting evidence to Microsoft for accelerating their machine learning input.
Cisco suggest to set up SPF, DKIM and DMARC records to mitigate the impact.
ETA for next update: Monday, October 18th, 2021.
Oct 11, 20:15 EDT
Update - Despite Microsoft deploying a workaround last Friday, October 1st, 2021, there is still a high influx of customers being impacted.
Microsoft's team is still working on a global and permanent fix.
Cisco continues submitting evidence to Microsoft that will be used for finding a resolution ASAP.
ETA for next update: Monday, October 11th, 2021.
Oct 5, 17:43 EDT
Update - Estimated time to resolve: Microsoft expects this issue to be completely resolved for all affected users by Friday, October 1, 2021.

Root cause: Due to the underlying machine learning logic utilized by Microsoft's anti-spam service, messages incorrectly identified as phish resulted in a poor reputation score for the sender and thus impact.
Sep 27, 19:27 EDT
Identified - The issue has been identified and a fix is being pursued.
Sep 27, 13:02 EDT
Investigating - Cisco TAC has been receiving reports about email delivery issues when using CRES service, ESA on box encryption, and encryption portal service. If the end-users use Microsoft Outlook or O365 as the client, the encrypted emails are being classified as "High Confidence Phish" by Microsoft and either quarantined or sent to the Junk folder.



Who does it affect?

This only affects our customers who are using Cisco’s encryption service and sending encrypted emails to their clients/customers who use Microsoft O365. Clients using other email clients or services are not affected.



What is Cisco doing?

Cisco is continuing to work with Microsoft to address this issue.



What should customers do?

Microsoft will only respond to its own customers. If you are experiencing issues with the delivery of secure messages to Microsoft customers, we ask that you have your recipients escalate the issue to Microsoft.
Sep 24, 17:36 EDT

About This Site

Welcome to the Cisco Email and Web Security status page. The purpose of this page is to track issues impacting the Cisco's Email Security Appliance (ESA), Web Security Appliance (WSA) and associated services.

For the status of Cisco Umbrella Service, please visit: https://status.umbrella.com
For the status of Cisco Cloud Email Security (CES), please visit: https://status.ces.cisco.com/

Do you have a question or would like to report a status page related issue? Please contact security-urgent-notices@cisco.com.

Advanced Malware Protection (AMP) Operational
90 days ago
99.94 % uptime
Today
File Reputation ? Operational
90 days ago
100.0 % uptime
Today
File Analysis ? Operational
90 days ago
99.89 % uptime
Today
Anti-Spam Operational
90 days ago
100.0 % uptime
Today
IronPort Anti-Spam Operational
90 days ago
100.0 % uptime
Today
Graymail Detection and Safe Unsubscribe Operational
90 days ago
100.0 % uptime
Today
IronPort Intelligent Multi-Scan Operational
90 days ago
100.0 % uptime
Today
Anti-Virus Operational
90 days ago
100.0 % uptime
Today
McAfee Operational
90 days ago
100.0 % uptime
Today
Sophos Operational
90 days ago
100.0 % uptime
Today
Phishing Protection Operational
90 days ago
100.0 % uptime
Today
Advanced Phishing Protection Operational
90 days ago
100.0 % uptime
Today
Secure Awareness Operational
90 days ago
100.0 % uptime
Today
Security Services Operational
90 days ago
100.0 % uptime
Today
SenderBase Reputation Score (SBRS) Operational
90 days ago
100.0 % uptime
Today
Sender Domain Reputation (SDR) Operational
90 days ago
100.0 % uptime
Today
Service Updates Operational
90 days ago
100.0 % uptime
Today
URL Filtering Operational
90 days ago
100.0 % uptime
Today
Web Interaction Tracking Operational
90 days ago
100.0 % uptime
Today
Data Loss Prevention (DLP) Operational
90 days ago
100.0 % uptime
Today
Cisco Secure Email Encryption Service ? Partial Outage
90 days ago
91.05 % uptime
Today
Cisco Talos Email Status Portal (ESP) ? Operational
90 days ago
100.0 % uptime
Today
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.
Scheduled Maintenance
The Cisco Secure Malware Analytics (Threat Grid) Cloud service for North America (https://panacea.threatgrid.com) will be undergoing planned maintenance on Saturday, November 6th between 10:00 AM and 11:30 AM Central Daylight Savings Time (15:00 - 16:30 UTC). File Analysis, Portal (Panacea), API, and Integration Services will be unavailable for up to 90 minutes during this maintenance window.

The Malware Analytics Europe Cloud service (https://panacea.threatgrid.eu) is not affected by this maintenance.

We apologize for the inconvenience this may cause and seek to keep any downtime to a minimum. For any questions, please contact the Cisco Technical Assistance Center.

Thank you,

Cisco
Posted on Oct 20, 10:46 EDT
Past Incidents
Oct 21, 2021

No incidents reported today.

Oct 20, 2021

No incidents reported.

Oct 19, 2021

No incidents reported.

Oct 18, 2021

No incidents reported.

Oct 17, 2021

No incidents reported.

Oct 16, 2021

No incidents reported.

Oct 15, 2021

No incidents reported.

Oct 14, 2021

No incidents reported.

Oct 13, 2021

No incidents reported.

Oct 12, 2021

No incidents reported.

Oct 11, 2021

Unresolved incident: Urgent ESA Issue - 2021-09-24-1.

Oct 10, 2021

No incidents reported.

Oct 9, 2021

No incidents reported.

Oct 8, 2021

No incidents reported.

Oct 7, 2021

No incidents reported.